Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/25702a-db31-4ac6-a786-071cee6dc5c7/1/DF7cCuyEGiCqGk_pdkpH6urfJc8.mft
File:                     DF7cCuyEGiCqGk_pdkpH6urfJc8.mft (raw, json)
Hash identifier:          PPWHPNtaHdA5Bo0CUbUlg3q1FXIgaoTTYCRbxHKeuO0=
Subject key identifier:   3A:09:CC:C6:6C:B7:B4:97:28:42:1B:52:78:88:2A:A3:DA:06:98:3D
Authority key identifier: 0C:5E:DC:0A:EC:84:1A:20:AA:1A:4F:E9:76:4A:47:EA:EA:DF:25:CF
Certificate issuer:       /CN=0c5edc0aec841a20aa1a4fe9764a47eaeadf25cf
Certificate serial:       018F001B8206564EB344F7900E0061D0E5EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DF7cCuyEGiCqGk_pdkpH6urfJc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/25702a-db31-4ac6-a786-071cee6dc5c7/1/DF7cCuyEGiCqGk_pdkpH6urfJc8.mft
Manifest number:          098B
Signing time:             Sun 21 Apr 2024 10:02:33 +0000
Manifest this update:     Sun 21 Apr 2024 10:02:33 +0000
Manifest next update:     Mon 22 Apr 2024 10:02:33 +0000
Files and hashes:         1: DF7cCuyEGiCqGk_pdkpH6urfJc8.crl (hash: 1z2X7vev+yPh1naDHlxRzPZqSlEMvAAbkkY9L47QPfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:00:1b:82:06:56:4e:b3:44:f7:90:0e:00:61:d0:e5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5edc0aec841a20aa1a4fe9764a47eaeadf25cf
        Validity
            Not Before: Apr 21 10:02:33 2024 GMT
            Not After : Apr 22 10:02:33 2024 GMT
        Subject: CN=3a09ccc66cb7b49728421b5278882aa3da06983d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:80:77:d3:84:97:95:0f:67:81:02:f3:3f:
                    de:b5:c2:55:4e:03:1f:2f:6f:50:70:57:71:89:48:
                    7a:32:90:d1:38:50:5d:8c:76:e8:89:b2:d5:ce:72:
                    f8:a3:75:87:3f:56:53:8e:86:df:1f:04:fa:4f:b7:
                    e5:ec:74:bb:df:13:69:31:38:2a:ac:eb:ab:64:30:
                    7f:50:13:9c:54:2b:22:06:44:c9:ba:8b:85:c9:09:
                    47:51:e3:53:7d:a1:7e:cd:24:64:ea:1f:70:d0:26:
                    7e:7c:a7:69:e7:87:55:75:5f:ca:27:75:bf:99:10:
                    81:c3:8d:55:c8:dc:a6:e2:88:ab:e1:62:7f:17:3f:
                    6e:c7:c8:60:8b:70:9a:79:5d:e6:49:84:0c:5e:04:
                    7a:b2:58:a9:a3:16:8c:60:79:dd:cb:8f:d6:75:c8:
                    2a:0f:15:60:1b:fd:ce:03:35:f6:21:aa:e7:fa:44:
                    8a:ba:14:b0:68:79:ec:ab:d1:15:88:31:2a:35:90:
                    e2:fd:d8:53:27:a7:55:47:f6:1f:75:c5:02:c4:a4:
                    f0:62:93:61:73:71:c6:cf:e3:7f:91:5b:f9:6f:51:
                    9a:7a:2f:2e:8a:9e:57:f7:ac:8d:3b:3c:da:25:d0:
                    54:55:75:23:bf:dd:9d:14:49:d1:8f:26:55:10:75:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:09:CC:C6:6C:B7:B4:97:28:42:1B:52:78:88:2A:A3:DA:06:98:3D
            X509v3 Authority Key Identifier:
                keyid:0C:5E:DC:0A:EC:84:1A:20:AA:1A:4F:E9:76:4A:47:EA:EA:DF:25:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF7cCuyEGiCqGk_pdkpH6urfJc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/25702a-db31-4ac6-a786-071cee6dc5c7/1/DF7cCuyEGiCqGk_pdkpH6urfJc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/25702a-db31-4ac6-a786-071cee6dc5c7/1/DF7cCuyEGiCqGk_pdkpH6urfJc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:1d:cf:43:a3:d9:a1:aa:e9:cb:f6:76:c6:3a:ec:ca:96:
         88:f2:c9:c9:4d:a1:82:37:f9:17:19:15:0b:91:18:53:ab:b2:
         dd:e3:a0:17:2b:7b:5a:55:ee:e1:f6:ae:a8:c0:11:88:23:f8:
         fe:f7:13:2e:a3:e5:b6:6b:75:06:a9:7a:b6:89:20:c9:e8:c3:
         ac:f6:c0:37:20:c4:2c:f8:56:5e:3c:21:17:16:81:c3:74:1a:
         35:ba:fb:6e:aa:2d:af:50:53:f0:93:b6:07:3c:46:6b:6d:14:
         b1:b0:39:28:4c:97:09:2f:af:9c:62:65:c0:82:a8:05:76:33:
         ea:69:c3:ef:e4:58:14:56:43:73:87:e0:b2:8c:fc:55:a4:96:
         22:28:2b:3e:f0:f2:ee:8c:f3:59:0c:68:8c:3c:78:7a:27:e4:
         27:09:d0:54:10:07:7c:45:04:a4:60:ae:92:64:14:d9:68:2f:
         bb:3a:c6:97:35:eb:22:68:ca:d3:aa:18:6e:5e:b7:7d:74:8c:
         c9:dd:14:30:35:1c:2d:50:12:a2:27:8f:1e:10:dc:e7:71:6c:
         30:e6:03:0f:17:06:d4:c1:39:e3:2d:78:8c:65:74:45:88:ac:
         98:7a:86:4b:97:14:e9:36:6c:9c:12:72:53:33:93:19:33:4b:
         f6:0f:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----